How do I create a new FSx for ONTAP file system in a shared VPC?

Resolution

Prerequisites

To create and share your FSx for ONTAP file system, the following prerequisites must be met:

• You must have two AWS accounts that are within the same organization. For more information, see Inviting an AWS account to join your organization.
• Sharing must be turned on in AWS Organizations for the main account of the organization. For more information, see Enable resource sharing within AWS Organizations.
• You must have a shared VPC with a subnet shared to the account. This subnet can be in the main account or in the account that joined your organization.

Example:

1. Account A is the main account of the organization, and Account B has joined the organization.
2. Account A turned on sharing in the AWS Resource Access Manager (AWS RAM).
3. Account A creates one VPC with two subnets, and shared these two subnets to Account B.
4. Account A creates a FSx for ONTAP file system.
5. Account B creates an Amazon Elastic Compute Cloud (Amazon EC2) instance using the shared VPC.
6. Account B mounts the FSx for ONTAP file system of Account A in the shared VPC.

Create shared subnets

1. Open the AWS RAM console.
2. Select Create a resource share.
3. In Step 1: Specify resource share details, enter a resource share name. For example, Shared_VPC_TEST.
4. For Select resource type, select Subnet, and then choose the subnets to be shared from the list or resources.
5. Select Next.
6. In Step 2: Associate a permission with each resource type, select Next. ( AWSRAMDefaultPermissionSubnet is the only permission available.)
7. In Step 3: Choose principals to grant access, enter the 12-digit account ID that you’re sharing the resource with, and then choose Add.
8. Select Next.
9. In Step 4: Review and create, make sure that all details are correct, and then select Create resource share.

For detailed steps on creating a resource share, see Create a resource share.

Note: You can't share subnets that are in a default VPC.

Create your FSx for ONTAP file system in a shared VPC and access it from the shared account

1. Create an FSx for ONTAP file system in the shared VPC that contains the shared subnet. For detailed instructions on creating a file system, see Step 1: Create an Amazon FSx for NetApp ONTAP file system.
2. From the account that the resource is shared, launch an EC2 instance in the shared VPC, and then mount the FSx for ONTAP file system on the instance. For detailed instructions on how to mount the file system, see Mounting volumes.

Related information

AWS Resource Access Manager

AWS account management